@lssm/example.wealth-snapshot 0.0.0-canary-20251217063201 → 0.0.0-canary-20251217073102

package/dist/libs/identity-rbac/dist/entities/user.js

@@ -1 +1,194 @@
-import{i as e,r as t,t as n}from"../schema/dist/entity/defineEntity.js";import"../schema/dist/index.js";const r=n({name:`User`,description:`A user of the platform. Users hold core profile information and authenticate via Account records.`,schema:`lssm_sigil`,map:`user`,fields:{id:t.id({description:`Unique user identifier`}),email:t.email({isUnique:!0,description:`User email address`}),emailVerified:t.boolean({default:!1,description:`Whether email has been verified`}),name:t.string({isOptional:!0,description:`Display name`}),firstName:t.string({isOptional:!0,description:`First name`}),lastName:t.string({isOptional:!0,description:`Last name`}),locale:t.string({isOptional:!0,description:`User locale (e.g., "en-US")`}),timezone:t.string({isOptional:!0,description:`Olson timezone (e.g., "Europe/Paris")`}),imageUrl:t.url({isOptional:!0,description:`URL of avatar or profile picture`}),image:t.string({isOptional:!0,description:`Legacy image field`}),metadata:t.json({isOptional:!0,description:`Arbitrary user metadata`}),onboardingCompleted:t.boolean({default:!1,description:`Whether onboarding is complete`}),onboardingStep:t.string({isOptional:!0,description:`Current onboarding step`}),whitelistedAt:t.dateTime({isOptional:!0,description:`When user was whitelisted`}),role:t.string({isOptional:!0,default:`"user"`,description:`User role (user, admin)`}),banned:t.boolean({default:!1,description:`Whether user is banned`}),banReason:t.string({isOptional:!0,description:`Reason for ban`}),banExpires:t.dateTime({isOptional:!0,description:`When ban expires`}),phoneNumber:t.string({isOptional:!0,isUnique:!0,description:`Phone number`}),phoneNumberVerified:t.boolean({default:!1,description:`Whether phone is verified`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),sessions:t.hasMany(`Session`),accounts:t.hasMany(`Account`),memberships:t.hasMany(`Member`),invitations:t.hasMany(`Invitation`),teamMemberships:t.hasMany(`TeamMember`),policyBindings:t.hasMany(`PolicyBinding`),apiKeys:t.hasMany(`ApiKey`),passkeys:t.hasMany(`Passkey`)}}),i=n({name:`Session`,description:`Represents a login session (e.g., web session or API token).`,schema:`lssm_sigil`,map:`session`,fields:{id:t.id(),userId:t.foreignKey(),expiresAt:t.dateTime({description:`Session expiration time`}),token:t.string({isUnique:!0,description:`Session token`}),ipAddress:t.string({isOptional:!0,description:`Client IP address`}),userAgent:t.string({isOptional:!0,description:`Client user agent`}),impersonatedBy:t.string({isOptional:!0,description:`Admin impersonating this session`}),activeOrganizationId:t.string({isOptional:!0,description:`Active org context`}),activeTeamId:t.string({isOptional:!0,description:`Active team context`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})}}),a=n({name:`Account`,description:`External authentication accounts (OAuth, password, etc.).`,schema:`lssm_sigil`,map:`account`,fields:{id:t.id(),accountId:t.string({description:`Account ID from provider`}),providerId:t.string({description:`Provider identifier`}),userId:t.foreignKey(),accessToken:t.string({isOptional:!0}),refreshToken:t.string({isOptional:!0}),idToken:t.string({isOptional:!0}),accessTokenExpiresAt:t.dateTime({isOptional:!0}),refreshTokenExpiresAt:t.dateTime({isOptional:!0}),scope:t.string({isOptional:!0}),password:t.string({isOptional:!0,description:`Hashed password for password providers`}),createdAt:t.createdAt(),updatedAt:t.updatedAt(),user:t.belongsTo(`User`,[`userId`],[`id`],{onDelete:`Cascade`})},indexes:[e.unique([`accountId`,`providerId`])]}),o=n({name:`Verification`,description:`Verification tokens for email/phone confirmation.`,schema:`lssm_sigil`,map:`verification`,fields:{id:t.uuid(),identifier:t.string({description:`Email or phone being verified`}),value:t.string({description:`Verification code/token`}),expiresAt:t.dateTime({description:`Token expiration`}),createdAt:t.createdAt(),updatedAt:t.updatedAt()}});export{a,i,o,r};
+import { defineEntity, field, index } from "../schema/dist/entity/defineEntity.js";
+import "../schema/dist/index.js";
+
+//#region ../../libs/identity-rbac/dist/entities/user.js
+/**
+* User entity - core user profile and authentication.
+*/
+const UserEntity = defineEntity({
+	name: "User",
+	description: "A user of the platform. Users hold core profile information and authenticate via Account records.",
+	schema: "lssm_sigil",
+	map: "user",
+	fields: {
+		id: field.id({ description: "Unique user identifier" }),
+		email: field.email({
+			isUnique: true,
+			description: "User email address"
+		}),
+		emailVerified: field.boolean({
+			default: false,
+			description: "Whether email has been verified"
+		}),
+		name: field.string({
+			isOptional: true,
+			description: "Display name"
+		}),
+		firstName: field.string({
+			isOptional: true,
+			description: "First name"
+		}),
+		lastName: field.string({
+			isOptional: true,
+			description: "Last name"
+		}),
+		locale: field.string({
+			isOptional: true,
+			description: "User locale (e.g., \"en-US\")"
+		}),
+		timezone: field.string({
+			isOptional: true,
+			description: "Olson timezone (e.g., \"Europe/Paris\")"
+		}),
+		imageUrl: field.url({
+			isOptional: true,
+			description: "URL of avatar or profile picture"
+		}),
+		image: field.string({
+			isOptional: true,
+			description: "Legacy image field"
+		}),
+		metadata: field.json({
+			isOptional: true,
+			description: "Arbitrary user metadata"
+		}),
+		onboardingCompleted: field.boolean({
+			default: false,
+			description: "Whether onboarding is complete"
+		}),
+		onboardingStep: field.string({
+			isOptional: true,
+			description: "Current onboarding step"
+		}),
+		whitelistedAt: field.dateTime({
+			isOptional: true,
+			description: "When user was whitelisted"
+		}),
+		role: field.string({
+			isOptional: true,
+			default: "\"user\"",
+			description: "User role (user, admin)"
+		}),
+		banned: field.boolean({
+			default: false,
+			description: "Whether user is banned"
+		}),
+		banReason: field.string({
+			isOptional: true,
+			description: "Reason for ban"
+		}),
+		banExpires: field.dateTime({
+			isOptional: true,
+			description: "When ban expires"
+		}),
+		phoneNumber: field.string({
+			isOptional: true,
+			isUnique: true,
+			description: "Phone number"
+		}),
+		phoneNumberVerified: field.boolean({
+			default: false,
+			description: "Whether phone is verified"
+		}),
+		createdAt: field.createdAt(),
+		updatedAt: field.updatedAt(),
+		sessions: field.hasMany("Session"),
+		accounts: field.hasMany("Account"),
+		memberships: field.hasMany("Member"),
+		invitations: field.hasMany("Invitation"),
+		teamMemberships: field.hasMany("TeamMember"),
+		policyBindings: field.hasMany("PolicyBinding"),
+		apiKeys: field.hasMany("ApiKey"),
+		passkeys: field.hasMany("Passkey")
+	}
+});
+/**
+* Session entity - login sessions.
+*/
+const SessionEntity = defineEntity({
+	name: "Session",
+	description: "Represents a login session (e.g., web session or API token).",
+	schema: "lssm_sigil",
+	map: "session",
+	fields: {
+		id: field.id(),
+		userId: field.foreignKey(),
+		expiresAt: field.dateTime({ description: "Session expiration time" }),
+		token: field.string({
+			isUnique: true,
+			description: "Session token"
+		}),
+		ipAddress: field.string({
+			isOptional: true,
+			description: "Client IP address"
+		}),
+		userAgent: field.string({
+			isOptional: true,
+			description: "Client user agent"
+		}),
+		impersonatedBy: field.string({
+			isOptional: true,
+			description: "Admin impersonating this session"
+		}),
+		activeOrganizationId: field.string({
+			isOptional: true,
+			description: "Active org context"
+		}),
+		activeTeamId: field.string({
+			isOptional: true,
+			description: "Active team context"
+		}),
+		createdAt: field.createdAt(),
+		updatedAt: field.updatedAt(),
+		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+	}
+});
+/**
+* Account entity - external authentication accounts.
+*/
+const AccountEntity = defineEntity({
+	name: "Account",
+	description: "External authentication accounts (OAuth, password, etc.).",
+	schema: "lssm_sigil",
+	map: "account",
+	fields: {
+		id: field.id(),
+		accountId: field.string({ description: "Account ID from provider" }),
+		providerId: field.string({ description: "Provider identifier" }),
+		userId: field.foreignKey(),
+		accessToken: field.string({ isOptional: true }),
+		refreshToken: field.string({ isOptional: true }),
+		idToken: field.string({ isOptional: true }),
+		accessTokenExpiresAt: field.dateTime({ isOptional: true }),
+		refreshTokenExpiresAt: field.dateTime({ isOptional: true }),
+		scope: field.string({ isOptional: true }),
+		password: field.string({
+			isOptional: true,
+			description: "Hashed password for password providers"
+		}),
+		createdAt: field.createdAt(),
+		updatedAt: field.updatedAt(),
+		user: field.belongsTo("User", ["userId"], ["id"], { onDelete: "Cascade" })
+	},
+	indexes: [index.unique(["accountId", "providerId"])]
+});
+/**
+* Verification entity - email/phone verification tokens.
+*/
+const VerificationEntity = defineEntity({
+	name: "Verification",
+	description: "Verification tokens for email/phone confirmation.",
+	schema: "lssm_sigil",
+	map: "verification",
+	fields: {
+		id: field.uuid(),
+		identifier: field.string({ description: "Email or phone being verified" }),
+		value: field.string({ description: "Verification code/token" }),
+		expiresAt: field.dateTime({ description: "Token expiration" }),
+		createdAt: field.createdAt(),
+		updatedAt: field.updatedAt()
+	}
+});
+
+//#endregion
+export { AccountEntity, SessionEntity, UserEntity, VerificationEntity };